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Abstract of JP1 1338993 

PROBLEM TO BE SOLVED: To improve the 
secrecy of enciphering/deciphering programs 
by transmitting and receiving 
enciphering/deciphering programs themselves 
to and from an external information processor 
or another IC card to eliminate the need of 
collectively holding enciphering/deciphering 
programs of all IC cards in an information 
processor. 

SOLUTION: When there are reception data, 
the data kind of the header part of reception 
data is discriminated. Information to 
discriminate such kinds of data that is an 
enciphering program, a deciphering program, 
a complexing program or other data, is set in 
the data classification. If it is an enciphering/ 
deciphering program, an identifier of the 
enciphering/deciphering program is read from 
reception data to confirm whether the 
enciphering/deciphering program 
corresponding to the designated identifier 
exists or not. An identifier which coincides with 
the identifier of the received 
enciphering/deciphering program is retrieved 
from enciphering/deciphering program 
management data 113. When a corresponding 
identifier is found, enciphering/deciphering 
program management data corresponding to 
the identifier is returned. 
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H. 

-r s tt^a i fcSEtt*) ic*-k. 

Bf §/ttfftrn/5 A»R#«£«;lfcM#JS 2 
fcrfB»<Z)IC;#-K. 

[M*5I4 ] ff^3^ISSt^Bf^/a-^-ft^c?^7A 

7*o^5A*ieiw*i»9/a^kra^^jB»¥S 

[«*JI6 ] W^JI 1 *»6 5 COMtL*> 1 -0\,Z.tm><F> I C 

LfcBf^/a*ffcyn^5A<?5 I C#- Krt'StfJfMISS 
fc , I C # - F eoeK^if^/a^flsra ^7 

I C*-HfcflM*[n3anL JfcfcteHSrS I C#-K 



A. 

[OOOl] 
[0002] 

[ o o o 3 ] s fete. Bf^-^^a-^-fus^iia-mtf 
x- ? *«)HJSftt -r oat ^tJi^>a 
#*b»=*f LxMwswmizx m^-it lx mm - 

[0004] .TtfDj: 3 iSr^XfAttJV^f- rJ^Bg^- 

nammmzxm^/Gi^ikyay^^izj: on^^ix-s. 

*. L*-L. ^ <7)Bm/m^ty° o^7Agftll -r- 
^tZtifcf-ftfMmZixXLto. 4fcJ4*#/a 

flatter Bt -^ftr&^&SrttJn-r ^. c tcto. 

m^ittstifz-t^xc^f-? *m=%i]mmt& - 
t *^rsgtc * s ash. t * & . 

[0005] i<^Bf^/a^-ft;7°a^7AS:mH^^ 
SESix-g, i i: 35:< . *>oBfSHt£> •!» t ^tia^ft&SWW 
^tTO^tC. ^^9-6 2 3 2#Ttt, Bf^/a# 

Bf^/a-f-fLTn iT5ASrIC^-h' U 

t^fit. ic^-Hrttcfev^rsBtra^Asa^- 
-ft L^f^^ffifg^^s^ai^tt^ ^& u (casus l . a^- 

^S*ufeW#/a^kya^5A*fflV^T. iMfl^-^x 
[0006] 

xfAtfei^, #i c#-F*fc*2r*nf-§-/a#fl: 



M 

- I 
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1-3 389 9 3 



[0007]§^l:l«- HWTH^tLfcllf/a 

[ooo8] -xmrniz. £x<7) i c#- yvm^/m.^ 
< . m/®.^t7-v7?j*<7)wm&zfo±.2tt i c 

[00 09] 

*>. #fMmi ^/tmity-vyv^ztm^h^ 
k-rs. 

[0010] -T=5r^*>. ff*IB 1 fcHSfcfffiim 
£Bf#^&^xxAT-ffl^£ I C^-KT'&oT. Bf 

o^:?AfE1i*gk. Bf^/a-^ftT-a ^5 AlEtt^S 

^Aifffgh, Bt^/a^b7'n^^Aie^g 

[0011] SW»12teffi*5WHli. t=*H* 

t, t»Eiw/a-9fl:ro^5Aie*#g«i. mrfEBt^- 

[0012] il*«3fc:«*ffflHtt. IB^2^IE«JtfO 

Bf^-/a-f-fbrn^9Aisit#s^{®^-i» i c^-Htc 
/m.^ifr^y^^mmaiivmm-t^m.t, set 

[0013] 89*^4 HWW3(clB«co 
rttlB1t§iiT^i>ffiSOBf-^/a^b^o^5A^i5 



[0014] m$J3 5 fc:»*«Bjii, tt^JS i ~4 tfc 

£85?>mhSHfc&* fcteiWfcTu y^^x-mmtth # 
Bf^-fbSn^7-n^5A*Bf^>ft;L3tBt^-ftSt^ 

Bf^/a-f-ftT-n^^ ABf^-a#-fb*aSrfiii.^i k £ 

q^ak-r*. 

[0015] lf*Jl6 fc«43ffiJHl If*« 1 5<0 

srjifrri»#ak. mmi,im^/m<t?°vi-y?j±<r) 

I C#- Hrt"ua9NSf$¥JgU: . I C*- HrttfOffiB 

& Bf^/fM-^-ftv-X x AT'£> & . 
[00 16] 

[0017112H ^m^mmcommcD icx-v 

1 0 0 «t^^- Klffiyn 7 „ ^<7) I 

C^-h'l 0 011 CPU2 1 0. Atb^)-<>-^7x- 
X ( I/O) 2 2 0, ROM2 3 0. RAM 2 5 0. 33 
itfEEPROM24 0%ffi£X\^&* ROM230 

^•e#^V^»^1tc7)^^'J Sr^-T. RAM 2 5 0*3 J; 
tfEEPROM240ll ^IBIgfl^fs^tfi L3r£> 
^(ZSeRA^WCft^Ai, RAM 2 5 0(4 I C^r — K 1 

o o ^mm®m s mt:ti& t ^m^^ a w$m<r> 

-X^USttSU EEPROM24 0(41 C*}— VI 00 

[o o 1 8] mm. i2tst i c#— h i o oi^tc 

laT'SbS. 1 1 Oil H2 CORAM 2 5 0£>t«; 

EEPROM240rtfcfiJ0ST fe*UfeflB«RWfe^ 

t-^ s-a-^-ft-r^^^oBf^/a-f-fbrn^^A^ie 

«rt-4m#/a-^ft7"a^5AiBtt*Sl 1 lil 

u 1 1 o^^fijD^r^n^. 

[0019]S^. I Ctf-Kl 00*«5WiUfef*-^ 
^/cfi IC*-K10 0 rtT'3t!ia-r-l.-r-^ SrlElf-T-S 
fcft«f-^Kil#ai 1 2 Sr. ^'Jll Ort^ef^ 

[0020] m^/Wityuy? A|E<t#a 1 1 1 1*1 
t=iEtts<irv^s#flf^/a^ft7-o^5Aii, Bf^-/ 
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m^ty^^y^mf-^ 1 1 3izi->z ( gm'tz>. 

[0021] I C#- F 1 0 0 l*l«0«!«lfffiS<OHS^-/ 
a;/5A£gSiR-f 

[0022] ffSOBf^-/fft#^n^5ASrHf^-/fS 

^n/'&mtTu a m/mmtrviy? am 

¥S 1 2 0 i 0 3fft LfcttJftfcTEic. nft/BSVcr 

7?±.%vm%.\ i irt«if/iiffl:rn/?A*i 

1 1 3 £S«tt-*fc#fc*Bl£§;hJ!: 
Bf^/fl-f-fkra^A^^^E U 1 1 Ortfcffliitr. * 
feliB»#/«-9fl:ra^9A«3a7*-^ 1 1 3*»£*fj6 

7D/7A^tU 1 1 036><9lWHrt-S. 

[0023] ffgwif/affl:rn/5AS I c#- 
f i o ort-cewi-rs^ji. *»ss<xfe>t9/a-^fc 

#S1 4 0£«koT*^$*tfcBf#/a#fl:ru:/9A 
£fc"C\ x-^IBlg^Sl 1 2rtfciE«3*i 

p. 

[0024] Bf^-/a#-fC^a^9 Agl^g 140C 

^■(i. Bt^/mwrn^^AH^f-a^-^gi sot 

f/flfft/o / 7 Aj&a»#j& HOCio Tjgit 
[0 0 2 5] IC#-F1 OOtC^vOh^ffi^MS 

^Afcj;^7-"-^it^fi#gl 6 0£J;oTAiB:»M 
( I/O) 2 2 0£tefflLTSIfI[HI§ll 0 

[00261 11 (7)^0 -y ^BfcfcV vc . Bf#/a#te 

130. Bt^/m-^ro^ AjSi6¥© 1 
4 o . *&%/igmqcru7*7 j±m&&tt&wc i5o. 

Ml/t;. Bf^-/fS-f-fb^a^9AtJj:uf7 f -^^m* 
S 1 6 0 {4. I C F 1 0 0 rtO^SUte^ U -£•£> 



|,ROM2 3 0t^(iEEPROM24 0l*ltffl2 ! tf. 
[0027] 0 1 ±J ^1/12 K^LfcltSfr^JK 

«IC^-Ki005rffiffl L?tBf -f-fbfc il^itfftf- 

[OO283 03J1 I C#— F 1 0 0^Atfi^)^>^ 
7i-X (I/O) 2 2 0 Srteffl LTilftlHllS 1 0 Hz 

7-?mm. ttcimmmMLi o la^^-^^frr 

6 *46<^B§-5!-/fS-5Ht:r a ^5 A ti X Z/t- ? 3M^fI¥ 
S 1 6 0 (DWm&iji-? . #£!US{2:. I C# — HI 0 0* 5 

S3 1 Ofcit/SSSOcoWS^MfcioTiM 

[0029H8C. m&iwt&f-fo&j&ztjk't. 

SS^-* i: # Ji. S 3 4 0 eo«KI-Cs Sflx- 
(4. BfHHtru/^A. fI#-ftrn/5A. ifcfcfrf— 

B^/fl^-fl^o^ A&£>(J\ S 3 5 0*HWCiS^T 
gif- * A^B^/fS^t^a /5 AcDtf&S'ff SrgaX 
0 . S 4 0 0 *SaT*&«UB!HF-fc»iW-* ft^/Wtt. 

[ 0 0 3 0 ] S4 tc. S 4 0 0c7)Bf#/m-f-^a/5 
AM2KM<Os£fx£^\ Bf^/^-ffc^a /5AM 
®IS4 0 0f(l EEPROM24 0tRAM2 5 0 
rtfcKSfcS *VC v Bf^/fll^kT- a /9 A^x- * 
113*^, SmL^Bf#/a#-ftro^9A<Oi6SS<J^ 

(S420) . z^msmzttm-i- 

*>o^^(i*a«ii:LT^5-=J-F*iS^LT. S 
4 0 0)!!H3-^ , J?-Vtl.. 

[0031] s 4 o o ^mx-^mnrnztc & m^/im 

-ftra/^AWSIv-'-^ 1 1 3fi, H9tc^-rJ: o^m 

t&yvmssm*. Bf^/fc-^ffcro^ASr^iL*:;* 
- F I d k %<r>*}— FrtTWlt \^hW%/W5Vcr 

AC7)«ax-^(4. Bf-^-ft;7°a^9A<0 I C^-F 1 0 
0 |*I<7)f&*ftT F l/X, I Cfj— F 1 0 o ftcDm&ikyv 
^9A<Dfg^rF^X. -t-LT I C^-Fl OOrttf 
IliSiX-CV^^^rUaS'J (EEPROMitliRAMff) 
S'J) . *iJ:Uf«»SiiTV^l*#/a^7-a^5ASI6 

ny^jxcomsn? ms&m?M) *»fe»j«s<iT^ 

[0032] 09tC^L^J-C(i. g I C#-F 100 
CO^-F IDS: rco 0 1 j k-T-Si:. S I C^-FT 
fi*Lfci**/«^trn^9 ABWimi rcoOlO 

1 j rc 0 0 1 0 2 j C02S»T'S>0 ( SS83M-?lia«^ 
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rc o o i o 2 j X'hh'sm/umtyuy^Mt rc 

00 1 0 1 j lz£-?XV§^-ikZtlT\^Z£Z$kiyVX 

v^s. ttim^xm^rityu^j^m^ r co 2 0 1 

0 j 12. J&— K I D r c 0 2 0 j *»&<5D-r— ?SflB$t=: 
x- * *'<mtt h titbVWH tT a y =7 A <7)^| x- 

mtyuyj&wzw r c 0 0 0 0 0 j 12. £ 1 c#- 

mkTuy^&mWT rcooioij^rco30l 

1 j «2. d«50m^S#i§iX/i r C 0 0 0 0 0 j T'Bf^-ft 

ztix^zztzmLx^z. 
[0033] mxsm 3 izm-> x „ ^/mitru y? 
At5 £xf"r-7m&m$ms 3oo»s4o o%mx*&i 

ft;7n/5AffliJ!ras 5 0 0 2: 3— ;P LT , Jg^Bf^- 

fi7mS3 1 0*>6ii>53EU«HiSr^ffr*. S 
I£g:£<7>±§1=rt2, S4 0 0^a^MmS:7ntC. S3 7 0 

m*a>wj£u *aia«o«^(2. v&§r/ivH£ruy 

=7J± : S:mmS5 0Q*:-3—)V-?&. S370«tt*^ 

ifetis 5 o o mmx*mmizw^/m.*Tfcy°n?'7 a * 
^'J 1 1 ort(=fM»tfe*&«, gisasrasgLfci* 
^•/m^brar^Aeftj^aseooSrn-^L, 31 
#fs# . i c#- Hio o a*gfi-r 5 - * com^<m 

[0034] s 6 o ojprrafflistifcf-^tt, s 

3 8 0 «yB-CSHl7*— * £inl L. ^t'JUO iztm 
[ 0 0 3 5 ] m 5 tC. buIES 5 0 0#yiOBi^-/fg-5Hfc 

7AC0iii»'EEPROM24 0^RAM2 5 0*» 

[0036] 9ft)3!li%tt&£<E E P RO M 2 4 0 rteWft 
£-12. s 5 2 o^^v^SM»ate«B0HKOWffi&fT 
3rVK §fc»B#0*£li, S530BSlfc:i3VvCEEP 
R O M 2 4 0 \^<T>V^/m.mtT\ny=y Aflf- ? tC 

SMf ^/m^ity uy? Acygg-r- ? & 

WLEEPROM24 OrttC^SJfrT^. H!H^*<0« 
-£•12, S54 0«ySfc*SVvC. S4 0 0J«9SgJII£7t; 
t=E E P ROM 2 4 0 rt^flf-^ 4: *Bje**Ufefl«- 



[0037] 9*»HI»*tft&RAM 2 5 0|*|Oi&-£{2. 
S 5 5 0«J3fc:*JVvt % S»£^f2B'JI&cO¥iJ5££fi : 2r 
3 . fi»K*0>%£«\ S56 0*HMC*ilrVC. RAM 

2 5 oft&vm/w.^ity'vyjji'gmT-yiz&mL 

«LRAM2 5 0W:»§. H«Jfcg;£<9*§£-J2. % 
t^W^'J^^(2Hfi : -yr-r{c. RAMcr>Mfttm£&m 

lt i c#- hi oo izttt&mm&tetfmtitifz t # 

tRAM2 5 0l*l*^^T r -^S:H'JI^ (#5%) Sit 

[0038] 03COS6 0 OcOBf^/fa^LT 0 

^/fS-^-fb^^A^f^iJ^^Rtf r c o 3 0 1 
i j coi%s. yuy=7j±uw%: r c o o o o o j yuy 

m^ttXm S 7 0 0 £ n-;P-f & . 
[0 0 3 9] 07fc^-rS7 0 0*!UI-e{2. S7 10*a 

arc, m^wmcotzit><7>m^/m^ky°vy7^<7)Wi%i\ 
=* ummmcoM) 0>*m&pbgt&. mm* r C 0 3 

0 1 1 j *^S?ixTV^^-(2. r c 0 0 0 0 0 j T- 

/«Wn/5A»ia!SlS4 0 0 fca-^U Bf-^ 
/af^rn^SAflf-^fllftiRffl,, S 7 0 0 

[0040] Mimiza-frZtitzS 7 0 OSaiTCte. 

fgss^arafiF r c o o o o o j <o»t/affl:7D 

^9A£«^ffcrS*&Kj&*&S*»£da»£, S7 1 01 
3-C¥iJ5£-r & . r c 0 0 0 0 0 j ^Bf^/fM^-fb^n^ 

yMtm^-thiimtm^^x^c^t. it y ^— >^s. 

[0041] Silt Wtrj-;PL/i S 7 0 0»l*>f> y ^ 
— y^tiht. S7 l o^Stfcv^TMiS'J^ rco 3 0 

1 1 J COBf-f-Z-fS-^-ftTO^^A^^iJ^ r c 0 0 0 0 

0 j izz^xm&itzti. S60 o*iys^y ?—>~t 

[0042] S700 nmx-m^tztitiffisiifr r c o 

3 o 1 1 j com^/m^tt.yvy7J»zmmLx. S6 

1 ommiz&^x . sftx-^'vy y-fficoy-'-fmn 
nfif—yx-. m.^kyuy^j+cvmtfrtf r co3oi 
i j &mfeLxh&&mLtiT-*n®&{Uimzm¥T 

[0043]^S38 Oi^tCfcV^T^L^X-^ 
jDXfcit/^^y 1 1 O^colE^. 5EW*n»rfl8 

[0044] ic^-hi oocosmx-^ox-^a 

«HS 6 0 0 Srrj-yp-Tlxr r-^^fl-f-^a^ 
[0045] §<bC, I C#-F 1 0 0c7)Sfix-^O 
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[0 04 6] I C*-VfrL>V^<tLtZ7 : -?Zmm- 

zm&a. S6 o oamz&mL, m^-iktt^-?t 
m j %/m^t7°vy7£,&mmL. s 6 o o^ysti^ 
x?-?$:vmitL*:mx\ "r-^mmmms 320c 

^y^7x-^ (I/O) 2 2 0 Srtf- LTilfiBISLh 
[0047] *^BJc7) IC*-H100 izttLXm-tr/ 

T^S^iS i: El 8 ICS L^-r- tmsAz^ tzosm Zft 

^o^hx-^mz^h. 

[0048] ±M^>mtmm^zx k> . wmLfz^-? 
nm^itt tzim^wmit . ic*-h mzmm s n 
tzm^/'imteruy? a iz&if-tz, ztiz%K>. £ h 
k#i c^-vmizm^hm^-ym^ty^y^^m 
wt?&zbi)**imz*z>. 

[0049] 

^^Ag^Sr^gpcOWfgMa^a^^iflllO IC*-K 

1 c^-K^^i'i.geo'iffg^s^aiTttiftUcT) 1 c#- 

2: 1 C*-YWz%mZitX^&^/1s&<\L~Tv77 

<uzmmLxm^fcL. m^itLfz^-fcomm&f&tz 
\mmiz^itistz?-*zm&itt&tt^/®& 
i\:yn77<uzmmMzmmL. "f-9^mvrzm& 
mmm$.tz\m<Dic*j-Y\3., &mLtzm^/m^ 

i\LT a y 7 A £fi£ffl LX&m Lfzm^ltZtitZT- ? cr> 
tmtZ'tt o-t tM^z^h . iixtc J: 0 . # 1 c 

*-Ymzmtph^/m. j 5fcy°'ay*7j±* 1 c#-k 

vco^xm^tyny^^mmmmmm^x'-mm. 
tt&ztttmiz-tz,. 

[0050] 3.fzl C^J — HrttCBf^/a^t^U^^ 



■t&^&b. Bf#-fb$ix^rn^7AS:Bf#^L^Bf^ 
^Ut^^lE-r &fg^Hfc§Sifc ^(ift^-fbm j/ 5 ATfS-f- 

[laffi^ism^i^Hj] 

[01] *f|HJ<7) I C h'^tCffl^tf^^^a •/ ? 

0 

[02 ] ^HJcT) I ctj- Y*mm-&^- YWfficOZf 
[03 ] 0 1 ^fcft^Bf^/fl-f-fbra^^Afc it/^ 

[04] 0itcfc{t^Bf#/a^bra^^As^s 

[05] 01fct3{ti»Bi^/fI^I:Ta^^Ag#^iII^ 

#gojaa7a— -f-v— h0 
[06] Hifc:*jtt*Bi#/a#'ffcra^9AjBs^a 

[07] 0i(ctj{t-g.Bf^/fi^bra^5ABf^a-^ 

^b#S^a7a— h0 

[08 ] ^HJ(7) I c#- H^in^fi-r^^-^^^j 
£ifrt0 

[09] 0lKfctt£l^/«^tTo^Af21i*& 

nrnzm^-t^^/m^vcr^y^ j>mm,^-9crim 
[^^bj] 

10 0:1 C#-h\ 101: ilftHI^ (1Ti8*Jfctt#i 
UcOiSim) . 110 :^t'J (EEPROM^«iR 
AMSr^-T) .111: Bg^-/fg-^-ftrn^5A|E1t# 
112: x-^fE^g. 113: ^/W&VCT 
n^Aflf-^, 12 0: Bg-^/fl-f-ftro^^A 

s^g. 130: Bt ^ym^ty^^^mm^ 

14 0: Bf^-/fI^-ft7°a^5AS«J#S. 1 5 
0 : Bf^/m^-ftra^^ABf^-fl^l:^. 160: 

^/m^tyx37?j>t3£V7-?m5£m^®.. 2 1 

0 : CPU. 2 2 0: AtWM >^7x-X ( 1/ 
O) , 2 3 0: ROM. 240:EEPROM, 25 
0 : RAM. 
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10 0:i C»- K 



1 3( 

1 2 0 

1 1 0 

1 1 1 

1 1 



)0^^H 



CHI] 

101 :mwi 



[02] 



1 SO 



180 



21 



.1 40 



1 1/0 K 


I 


CPU 


9-4 ROM K 




»-tf EEPROMh 


M RAM h 



220 
0 
0 
0 



[06] 



[ia4] 



S 6 0 0 



Q 



Y 



S4 0 0 



S7 0 0 



S6 1 0 



EEPROM/RAMIC 



S4 1 0 



S42Q 




S430 



[07] 



S70 0 




S4 0 0 



-S7 0 0 



S7 1 0 
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[03] 



c 



S300 



S3 1 0 



S330 




S320 



S35 0 



-S40 0 



YES, 




S 37 0 



S50 0 



^ 



S600 



S380 
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[15] 




S500 



1EEPROM ^-S 5 2 0 



S5 3 0 




S550 



EEPROM K}f5£ 



S54 0 



EEPROM #>e«it3£ 

1 



S5 60 



RAM 



J 



[08] 











V 

y 
i 

SB 


D 




1 

9 




A 








St 








~f 
1 






SB 












■r- 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 
[Detailed Description of the Invention] 

[0001] 

[Field of the Invention] This invention relates to the IC card which enciphers and decrypts 
data by the code and decode processing based on a program. 

[0002] 

[Description of the Prior Art] The processing which enciphers data to keep it secret, using an 
encryption key as technique for keeping data (it also being called "information".) secret 
conventionally is known. Since it cannot return to the condition that it is decipherable if the 
key same once data are enciphered as the key used by encryption, or a specific decryption key 
is not used, it is possible to make data secret to those who own neither such an encryption key 
nor the decryption key. 

[0003] Furthermore, if an encryption key and a decryption key are revealed, since data will be 
decoded, safety has been raised by enciphering and keeping it with another encryption key to 
this encryption key and decryption key. 

[0004] As for the decryption processing for data encryption processing or data decode, in such 
a system, it is common that a code / decryption program performs with an information 
processor. The secrecy nature of data is raised because data are enciphered by this code / 
decryption program, and even an encryption key enciphers in order to raise safety further. 
However, this code / decryption program itself have that it is [ much ] more nearly defenseless 
than the data itself. A third person's analysis of such a code / a decryption program will 
decode the enciphered data. Or there is also a possibility of enabling a third person to decode 
all the enciphered data after that, by altering a code / the decryption program itself, and 
adding a means to encipher with the encryption key which the third person knows. 

[0005] In order to perform encryption or a decryption efficiently, without a third person 
altering this code / decryption program, in JP,9-6232,A Encipher a code / the decryption 
program itself with another encryption key, and it stores in the nonvolatile memory in an 
information processor. In case data are transmitted from an information processor to an IC 
card, the enciphered code / decryption program are transmitted to the volatile memory in an 
IC card. After decrypting the program concerned in an IC card, it transmits to the volatile 
memory of an information processor, and the data encryption or decryption to transmit is 
performed using the decrypted code / decryption program. 



[0006] 



[Problem(s) to be Solved by the Invention] However, in such a system, since it was necessary 
to hold the code / decryption program as which all IC cards were enciphered in the 
information processor which transmits and receives an IC card and data to use different code / 
decryption program for every IC card, the technical problem that huge storage capacity was 
required occurred. 

[0007] In case the code / decryption program furthermore decrypted within the IC card are 
transmitted to an information processor, a code / decryption program is in a defenseless 
condition, and has the technical problem that the possibility of leakage of the code / 
decryption program under transmission is expanded. 

[0008] This invention does not have the need of carrying out package possession of the code / 
the decryption program of all IC cards into an information processor, and aims at offering the 
IC card which raised the secrecy nature of a code / decryption program. 

[0009] 

[Means for Solving the Problem] In order to attain the above-mentioned purpose, this 
invention is characterized by having a means to make a code / decryption program memorize, 
a means to start a code / decryption program, a means to transmit and receive a code / the 
decryption program itself to an external information processor or other external IC cards, and 
a code / decryption program registration deletion means, in an IC card. 

[0010] Namely, invention concerning claim 1 is an IC card used by the system which 
enciphers a transmitted and received data by the code and decode processing based on a 
program. The code / decryption program store means for memorizing encryption or a 
decryption program (it being henceforth described as a code / decryption program), Start the 
code / decryption program memorized by the code / decryption program store means, and the 
data for encryption are used as code data. Or when transmitting the data enciphered as the 
code / decryption program starting means which uses the data for a decryption as decode data 
by the code / decryption program As opposed to data receiving origin in advance Or the code / 
a decryption program transceiver means to transmit and receive the code / decryption program 
for decoding the data enciphered to coincidence, It is characterized by having the code / a 
decryption program registration deletion means to register and delete a code / decryption 
program to a code / decryption program store means. 

[001 1] Invention concerning claim 2 is characterized by said code / decryption program store 
means memorizing two or more said codes / decryption programs in claim 1. 

[0012] It carries out having set invention concerning claim 3 to the IC card equipped with a 
code / decryption program store means according to claim 2, and having had a means register 
and delete the code / decryption program of arbitration from two or more code / decryption 
programs, and the code / decryption program selection means which starts the code / 
decryption program of arbitration in a code / decryption program starting means further as the 
description. 

[0013] It carries out invention concerning claim 4 having been equipped with the discernment 
means for identifying the code / decryption program of the arbitration memorized in the IC 
card in a code / decryption program selection means according to claim 3, and having had the 
code / a decryption program starting means started the code / decryption program which is 
specifying an identifier and corresponds as the description. 



[0014] Invention concerning claim 5 carries out having had a means encipher the code / the 
decryption program itself indicated to claim 1 by another encryption key or the encryption 
program, and the code / decryption program code decryption means decrypted by the 
decryption key or the decryption program corresponding to the encryption key which 
enciphered the enciphered program as the description in claims 1-4. 

[0015] A means by which invention concerning claim 6 transmits the code / decode program 
of arbitration to the IC card of any one publication of five, and a list from claim 1 through a 
communication line to this IC card, The registration demand means into the IC card of the 
transmitted code / decryption program, The information processor equipped with the deletion 
demand means of the code / decryption program of the arbitration in an IC card is used. 
Between an IC card and an information processor or between different IC cards They are the 
code / decryption system characterized by performing the data encryption and decryption 
which are transmitted and received through a communication line. 

[0016] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is 
explained using a drawing. 

[0017] Drawing 2 is a hard device block diagram which constitutes IC card 100 of the gestalt 
of operation of this invention. This IC card 100 is equipped with CPU210, an input/output 
interface (I/O) 220, and ROM230, RAM250 and EEPROM240. ROM230 shows the memory 
of the non-volatile which cannot perform renewal of the contents of storage, although read- 
out of the contents of storage is possible. Although read-out and updating of the contents of 
storage are possible for both RAM250 and EEPROM240, RAM250 shows the volatile 
memory which loses the contents of storage, when the current supply to IC card 100 is cut off, 
and shows the memory of the non-volatile in which EEPROM240 does not lose the contents 
of storage even if the current supply to IC card 100 is cut off. [0018] Drawing 1 is a block 
diagram which has arranged each component for realizing this invention in IC card 100 
shown in drawing 2 . Memory 110 shows the storage region assigned in RAM250 or 
EEPROM240 of drawing 2 . The code / a decryption program store means 1 1 1 to memorize 
the code / decryption program for decrypting the data enciphered or enciphered in data to 
make it secret are assigned in memory 110. 

[0019] Moreover, the data storage means 112 for memorizing the data processed within the 
data which IC card 100 received, or IC card 100 is assigned to field where the code / 
decryption program store means 1 1 1 in memory 1 10 are another. 

[0020] Each code / decryption program memorized in the code / decryption program store 
means 1 1 1 are managed with a code / decryption program management data 113. Drawing 9 
is one example of a code / decryption program management data. 

[0021] When choosing the code / decryption program of arbitration by the processing in IC 
card 100, a code / decryption program selection means 120 chooses the specified code / 
decryption program by referring to a code / decryption program management data 113. 

[0022] When the code / decryption program of the arbitration already registered into the code 
/ decryption program store means 1 1 1 by registration, or the code / decryption program store 
means 1 1 1 in the code / decryption program of arbitration are deleted, The result of having 
chosen the specified code / decryption program with the code / decryption program selection 
means 120 to origin Incorporate the code / decryption program specified while registering 



management data into the code / decryption program management data 113 within a code / 
decryption program store means 111 with the code / decryption program registration deletion 
means 130 in memory 110. Or the code / decryption program which corresponds while 
deleting the management data which corresponds from a code / decryption program 
management data 1 13 are deleted from memory 110. 

[0023] When starting the code / decryption program of arbitration within IC card 100, it is 
starting the code / decryption program specified by the code / decryption program starting 
means 140 based on the result of having chosen the specified code / decryption program with 
the code / decryption program selection means 120, and the data encryption or the decryption 
which is memorized in the data-storage means 112 and which should be enciphered carries 
out. 

[0024] In a code / decryption program starting means 140, when data [ need / a code / the 
decryption program itself / to be decrypted ] are stored in the code / decryption program 
management data 113 of the specified code / decryption program, after decrypting the code / 
decryption program specified with the code / decryption progr am code decryption means 150, 
it starts by the code / decryption program starting means 1 40. f[0025]"when transmitting data 
or a code / decryption program for data or a code / decryption program to the information 
processor of reception or the exterior from an external information processor in IC card 100, 
the data to a communication line 101 are transmitted and received with a code / decryption 
program, and the data transceiver means 160 using an input/output interface (I/O) 220. [0026] 
In the block diagram of drawing 1 , a code / decryption program, and the data transceiver 
means 160 are built into a code / decryption program selection means 120, the code / 
decryption program registration deletion means 130, the code / decryption program starting 
means 140, the code / decryption program code decryption means 150, and a list in ROM230 
or EEPROM240 which is the nonvolatile memory in IC card 100. 

[0027] Henceforth, an example of the encryption which used IC card 100 of the gestalt of 
operation shown in drawing 1 and drawing 2 , and encryption data transfer is explained based 
on drawing 3 -9. 

[0028] Drawing 3 shows processing of the code / decryption program for receiving data from 
data transmission or a communication line 101 to a communication line 101 using the 
input/output interface (I/O) 220 of IC card 100, and the data transceiver means 160. This 
processing supervises existence of a transmitted and received data by judgment processing of 
S3 10 and S330 in order to always enable registration of data transmission and reception, when 
IC card 100 is a running state. 

[0029] The format of the data transmitted and received to drawing 8 is shown. When there are 
received data, it is processing of S340 and the data classification of the header of received 
data is judged. The information for judging that data classification is an encryption program, a 
decryption program, or data is set up. If it is a code / decryption program, the identifier of a 
code / decryption program will be read in received data in S350 processing, and the existence 
of the code / decryption program corresponding to an assignment identifier will be checked by 
S400 processing. 

[0030] The flow of the code / decryption program selection processing of S400 is shown in 
drawing 4 . The identifier of a code / decryption program which received, and an identifier in 
agreement are searched with a code / decryption program selection processing S400 from the 
code / decryption program management data 1 13 set up in EEPROM240 and RAM250. When 
a corresponding identifier is detected, the return of the code / the decryption program 



management data corresponding to (S420) and its identifier is carried out, when undetectable, 
an error code is set up as un-registering, and a return is carried out to S400 processing call 
origin. 

[0031] The code / decryption program management data 113 which becomes a candidate for 
retrieval by S400 processing constitute the format as shown in drawing 9 . The identifier for 
identifying a code / decryption program consists of numbers of the code / decryption program 
managed within the card ID which registered the code / decryption program, and its card. 
When a code / the decryption program itself needs to be decrypted before the management 
data of a code / a decryption program performs the code / the decode program which is 
registered into the storing address in IC card 100 of an encryption program, the storing 
address of the decryption program in IC card 100, and IC card 100 and which is registered [ 
which are registered and is memory-classified (exception of EEPROM or RAM) ], it consists 
of identifiers (the column of decode processing) of the code / the decryption program which 
uses to the decryption. 

[0032] If the card ID of self-IC card 100 is set to "C001", the code / decryption program 
identifier registered with the self-IC card are two kinds, "C00101" and "C00102", (an 
identifier shall connect and express registration cards ID and No), and it expresses that the 
code / decryption program whose identifier is "COO 102" are enciphered by "C00 101" with the 
example shown in drawing 9 . Moreover, a code / decryption program identifier "C02010" 
means that only the management data of the decryption program for decrypting data is stored 
at the time of the data reception from Card ID "C020." Furthermore, a code / decryption 
program identifier "C00000" expresses the code / decryption program standardly registered 
into IC card 100 so that it can be used [ all / IC card ]. A code / decryption program identifier 
"C00101", and "C03011" mean being enciphered by these "CO00OO" by which standard 
registration was carried out. 

[0033] It returns to drawing 3 again and judges [ which registers the code / decryption 
program received from the received-data header by S3 60 processing based on the result 
searched with a code / decryption program, andSdata transceiver processing S400 processing 
of 300 / or or ] whether deletion is carried out. In a deletion demand, after calling a code / 
decryption program deletion S500 and deleting an assignment code / decryption program, 
repeat processing is performed from S3 10 which checks the existence of transmit data. In a 
registration demand, it judges whether the code / decryption program received by S370 
processing are already registered based on the result of S400 processing, and, in not 
registering, a code / decryption program registration processing S500 is called. When the 
assignment code / decryption program is already registered by S3 70 processing, or when a 
code / decryption program is newly registered into memory 1 10 by S500 processing, the code 
/ decryption program starting processing S600 specified succeedingly are called, and 
decryption processing of the data which IC card 100 receives is performed succeedingly. 

[0034] The data decrypted by S600 processing process received data by S3 80 processing, and 
after they perform processing of making memory 110 memorize etc., they perform them 
repeatedly from S3 1 0 processing. 

[0035] The flow of the code / decryption program registration of said S500 processing, and 
deletion is shown in drawing 5 . First, with reference to registration (registration memory) of 
the code / decryption program of a received-data header, or the field of deletion, the 
registration field of the code / decryption program used as a registration processing object 
judges EEPROM240 or RAM250 in S5 1 0 processing. 



[0036] When the candidate for registration deletion is in EEPROM240, the judgment of 
registration or deletion is performed in S520 processing, in a registration demand, in S530 
processing, the management data of a code / decryption program is created from received data 
to the code / decryption program management data in EEPROM240, and it stores it in 
EEPROM240. In a deletion demand, in S540 processing, the code / the decryption program 
itself specified as the management data in EEPROM240 based on the result of S400 
processing are deleted. 

[0037] When the candidate for registration deletion is in RAM250, the judgment of 
registration or deletion is performed in S550 processing. In S560 processing, in a registration 
demand, the management data of a code / decryption program is created from the data 
received to the code / decryption program management data in RAM250, and it stores it in 
RAM250. The case of a deletion demand makes management data delete from the inside of 
RAM250 intentionally, without performing deletion, when the current supply to IC card 100 
is cut off using the volatilization property of RAM (volatilization). 

[0038] The flow of the code / decryption program starting processing of drawing 3 of S600 is 
shown in drawing 6 . When the identifier of the target code / decryption program is "C0301 1", 
in order to decrypt the program itself by "C00000" program first, a code / decryption program 
code decryption processing S700 is called. 

[0039] By S700 processing shown in drawing 7 , the existence of the identifier (column of 
decode processing) of the code / decryption program for decode processing is judged by S710 
processing. For example, since it is necessary to decrypt by "C00000" when "C03011 11 is 
specified, a code / decryption program selection processing S400 is called using the identifier 
concerned, a code / decryption program management data information is acquired, and S700 
processing is called recursively. 

[0040] By S700 processing called recursively, it judges by S710 processing whether it is 
necessary to decrypt the code / decryption program of the specified identifier "C00000." Since 
there is no need of decoding, the return of the code / the decryption program of "C00000" is 
carried out as it is. 

[0041] If a return is carried out from the S700 processing called recursively, in S710 
processing, decoding of the code / the decryption program of an identifier "C03011" will be 
carried out by the identifier "C00000", and it will carry out a return to S600 processing by it. 

[0042] The code / decryption program of the identifier "003011" decrypted by S700 
processing are used, and the data classification of a received-data header performs decryption 
processing of the received data in which the identifier of a decryption program specifies 
"C030 1 1 " by data, in S6 1 0 processing. 

[0043] Reference of the data received in S3 80 processing after that, processing and the 
storage to memory 1 10, and updating are attained. 

[0044] When the data classification of the received data of IC card 100 is data, according to 
the identifier of the decryption program stored in the header, it is calling a code / decryption 
program starting processing S600, and decode processing of data is performed. 

[0045] Furthermore, when the identifier of a decryption program is not stored in the header by 
the case where the data classification of the received data of IC card 100 is data, the data 
which IC card 100 received do not have the need for a decryption. 



[0046] When transmitting the data enciphered from the IC card, after using S600 processing, 
specifying the data for encryption, and a code / decryption program and enciphering data in 
S600 processing, in the data transmitting processing S320, it changes into the data format 
according to the format of drawing 8 , and data are transmitted on a communication line 
through an input/output interface (I/O) 220. 

[0047] When performing registration deletion and data transmission and reception of a code / 
decryption program from an external information processor to IC card 100 of this invention, it 
becomes possible by performing processing according to the data format shown in mode of 
processing indicated to drawing 6 and drawing 7 , and drawing 8 . 

[0048] It will depend for a data encryption or decryption processing to keep it secret on the 
code / decryption program stored in the IC card, and the above-mentioned operation gestalt 
enables it to carry further different the code / a decryption program for every IC card. 

[0049] 

[Effect of the Invention] A means to make a code / decryption program memorize as 
explained above according to this invention, A means to start a code / decryption program, 
and a means to transmit and receive a code / the decryption program itself to an external 
information processor or other external IC cards, Since he is trying to have a code / decryption 
program registration deletion means in an IC card When the data enciphered from the IC card 
to an external information processor or other external IC cards are transmitted, The data to 
transmit are enciphered using the code / decryption program memorized in the IC card. The 
information processor or other IC cards which transmitted the code / decryption program to 
the transmission place in order to decrypt the data enciphered the time of transmission of the 
enciphered data, or beforehand, and received data It becomes possible to decrypt the 
enciphered data which were received using the received code / decryption program. It enables 
this to hold different code / decryption program for every IC card in an IC card. Moreover, it 
makes it unnecessary to carry out package possession of the code / the decryption program of 
all IC cards within an information processor. 

[0050] Moreover, it makes it possible to encipher in the code / the decode program itself 
transmit from an IC card by having a means encipher a code / the decryption program itself by 
another encryption key or the encryption program in an IC card, and the code / the decryption 
program code decryption means which decrypt by the decryption key or the decryption 
program corresponding to the encryption key which enciphered the enciphered program, and 
it makes it possible to improve the secrecy nature of the code / the decryption program under 
transmission. 

[Claim(s)] 

[Claim 1] It is the IC card used by the system which enciphers a transmitted and received data 
by the code and decode processing based on a program. The code / decryption program store 
means for memorizing encryption or a decryption program (it being henceforth described as a 
code / decryption program), Start the code / decryption program memorized by the code / 
decryption program store means, and the data for encryption are used as code data. Or when 
transmitting the data enciphered as the code / decryption program starting means which uses 
the data for a decryption as decode data by the code / decryption program As opposed to data 
receiving origin in advance Or the code / a decryption program transceiver means to transmit 
and receive the code / decryption program for decoding the data enciphered to coincidence, 
The IC card characterized by having the code / a decryption program registration deletion 



means to register and delete a code / decryption program to a code / decryption program store 
means. 

[Claim 2] Said code / decryption program store means are an IC card according to claim 1 
characterized by memorizing two or more said codes / decryption programs. 

[Claim 3] The IC card [ equipped with a means to set to an IC card equipped with a code / 
decryption program store means according to claim 2, and to register and delete the code / 
decryption program of arbitration from two or more code / decryption programs, and the code 
/ decryption program selection means which starts the code / decryption program of 
arbitration in a code / decryption program starting means further ] according to claim 2. 

[Claim 4] The IC card according to claim 3 which was equipped with the discernment means 
for identifying the code / decryption program of the arbitration memorized in the IC card in a 
code / decryption program selection means according to claim 3, and was equipped with the 
code / a decryption program starting means to start corresponding code / decryption program 
by specifying an identifier. 

[Claim 5] The IC card of any one publication of four by claim 1 equipped with a means to 
encipher the code / the decryption program itself indicated to claim 1 by another encryption 
key or the encryption program, and the code / decryption program code decryption means 
decrypted by the decryption key or decryption program corresponding to the encryption key 
which enciphered the enciphered program. 

[Claim 6] A means to transmit the code / decode program of arbitration to the IC card of any 
one publication of five, and a list from claim 1 through a communication line to this IC card, 
The registration demand means into the IC card of the transmitted code / decryption program, 
The information processor equipped with the deletion demand means of the code / decryption 
program of the arbitration in an IC card is used. Between an IC card and an information 
processor or between different IC cards The code / decryption system characterized by 
performing the data encryption and decryption which are transmitted and received through a 
communication line. 
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[0033] 

As shown in Fig. 3, based on a result obtained from the searching in 
the S400 process of the S300 for transmission/reception of 
encryption/decryption program and data, it is judged, from the received 
data-header section, whether the received encryption/decryption 
program is to be registered or deleted. If the deletion is requested, an 
encryption/decryption program deleting process S500 is called, to delete 
the designated encryption/decryption program is deleted. Then, the 
processes are repeated from the S3 10 which checks whether or not there 
is data to be transmitted. If the registration of the encryption/decryption 
program is requested, a S370 process is carried out to judge, based on 
the result obtained from the S400 process, whether or not the received 
encryption/decryption program has already been registered. If the 
encryption/decryption program is not registered, an 
encryption/decryption program registering process S500 is called. If (a) 
the encryption/decryption program has already been registered, or (b) 
the encryption/decryption program is newly registered to the memory 
110 in the S500, an encryption/decryption program activating process 
S600 is called, the process S600 being for activating the designated 
encryption/decryption program. Then, a decrypting process is carried 
out with respect to data received by the IC card 100. 

[0034] 
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After the data is decrypted in the process of the S600, the received 

data is processed in a S380. Then, a process such as storing of the data 
in the memory 110 is carried out, and the processes are repeated from 
the S3 10. 
[0035] 

Fig. 5 shows a flow of the enciyption/decryption program 
registering/deleting process S500. First, in a S510 process, it is judged 
whether a registration area for the encryption/decryption program to be 
registered is the EEPROM 240 or the RAM 250, by referring to that 
portion of the received data-header section which indicates registration 
(registration memory) or deletion of the encryption/decryption program. 

[0036] 

If the encryption/decryption program to be registered or deleted is 
in the EEPROM 240, it is judged, in a S520 process, whether the 
encryption/decryption program is to be registered or deleted. If the 
registration is requested, a S530 process is carried out to create, from 
the received data, administrating data for the encryption/decryption 
program, the administrating data being created in the 
enciyption/decryption program administrating data in the EEPROM 
240. Then the encryption/decryption program administrating data is 
stored in the EEPROM 240. If the deletion is requested, a S540 process 
is carried out to delete (i) the administrating data in the EEPROM 240, 
and (ii) the designated encryption/decryption program itself, the 
deletion being carried out referring to the result of the S400 process. 
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[0037] 

If the encryption/decryption program to be registered or deleted is 
in the RAM250, it is judged, in a S550 process, whether the 
encryption/decryption program is to be registered or deleted. If the 
registration is requested, a S560 process is carried out to create, from 
the received data, the administrating data for the encryption/decryption 
program, the administrating data being created in the 
encryption/decryption program administrating data in the RAM250. 
Then the encryption/decryption program administrating data is stored 
in the RAM250. If the deletion is requested, the deleting process is not 
deliberately carried out, and by using the volatile characteristic of the 
RAM, the administrating data is deleted (volatized) from the RAM250 
when the power supply to the IC card 100 is stopped. 

[0038] 

Fig. 6 shows a flow of the encryption/decryption program activation 
process S600 shown in Fig. 3. For example, if the identifier of the 
targeted encryption/decryption program is "C03011", the 
encryption/decryption program encryption/decryption process S700 is 
called for decrypting the targeted encryption/decryption program by 
using a program whose identifier is "C00000". 

[0039] 

In the S700 process shown in Fig. 7, it is judged, in a S710 process, 
whether or not there is the identifier (in the column of "decrypting 
process") of the encryption/decryption program for use in the decrypting 
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process. For example, if "C03011" is designated, the program whose 

identifier is "C00000" is needed for the decrypting process. Accordingly, 
the encryption/decryption program selecting process S400 is called by 
using the identifier, thereby obtaining the encryption/decryption 
administrating data. Then, S700 process is recursively called. 
[0040] 

In the S700 being recursively called, it is judged, in the S710 
process, whether or not it is necessary to decrypt the 
encryption/decryption program whose identifier is the designated 
identifier of "C00000". Since it is not necessary to decrypt the 
encryption/decryption program whose identifier is "C00000", the 
decrypting process is not carried out, and the process is returned. 

[0041] 

If the process is returned from the S700 having been recursively 
called, the encryption/decryption program whose identifier is "C00301" 
is decrypted by using the encrypting decrypting program whose 
identifier is "C00000". Then, the process is returned to S600 process. 

[0042] 

In a S610 process, the encryption/decryption program, whose 
identifier is "C00301", and which has been decrypted in the S700 
process, is then used for decrypting received data whose data-header 
section indicates that the type of the received data is "data", and whose 
identifier of the decrypting program designates "C0030H'\ 

[0043] 
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After that, in the S380 process, it becomes possible to (i) refer to the 

received data, (ii) process the received data, (iii) store the received data 
in the memory 110, or (iv) update the received data having been stored. 
[0044] 

Thus, in a case where the type of the data received by the IC card 
100 is the "data", the encryption/decryption program activation process 
S600 is called, referring to the identifier of the decryption program, the 
identifier stored in the header section of the data, thereby the 
decrypting process of the data is carried out. 

[0045] 

Further, in a case where the type of the data received by the IC card 
100 is the "data", and the header section does not contain the identifier 
of the decrypting program, the data received by the IC card 100 does not 
have to be decrypted. 
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